Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: RVao7dNqlOPd2ZtV23eYC+iq4CwwL96ht8vEj0zS7Ow=
Subject key identifier: 1D:57:AB:48:93:57:02:D0:B7:25:1F:62:F7:14:D4:D5:D9:71:53:76
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 01A0C06841A51C8FC4FD81F717027FFCB845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 103D
Signing time: Sun 20 Sep 2026 20:00:52 +0000
Manifest this update: Sun 20 Sep 2026 20:00:52 +0000
Manifest next update: Mon 21 Sep 2026 20:00:52 +0000
Files and hashes: 1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: Fai5A6XfkCY2nVjUBS2kVTeQ4W/RZyg5diSVJgJjbs4=)
8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:68:41:a5:1c:8f:c4:fd:81:f7:17:02:7f:fc:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Sep 20 20:00:52 2026 GMT
Not After : Sep 21 20:00:52 2026 GMT
Subject: CN=1d57ab48935702d0b7251f62f714d4d5d9715376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:18:25:34:8b:68:f9:54:da:0a:81:2c:23:
0c:80:9b:e9:21:60:5e:70:83:74:3a:53:32:c7:8b:
b9:26:7a:b7:49:81:49:22:9a:1e:fe:6f:17:f4:b0:
70:ce:e3:0b:c5:e0:1c:2e:5f:1f:f8:24:58:f4:a9:
2c:28:67:a8:6c:38:5e:54:8f:43:c6:eb:26:90:9b:
e8:ef:e0:ca:01:13:04:a7:ea:8a:72:7d:4e:6f:f9:
ed:ad:c5:72:4a:31:f6:ec:59:c6:d4:87:af:12:6c:
dd:c5:44:71:61:01:2b:47:9d:87:16:48:2c:80:68:
e2:26:80:8c:91:73:6e:1f:bb:fa:2c:5e:d6:53:7e:
38:01:11:78:ed:4f:c3:32:1c:64:9b:d5:ec:98:5e:
9f:b5:42:a4:79:66:3c:47:a4:e8:e4:ee:89:f0:d5:
bf:69:bf:f1:ca:0f:28:71:50:e7:1b:cd:15:9b:f9:
f2:87:5e:8d:ec:6c:56:33:f4:e0:f1:8c:39:47:18:
54:e3:d7:36:f2:29:57:d5:bc:b7:e7:06:f8:84:fa:
50:14:1f:fb:4e:5b:29:5d:37:b9:5a:31:9a:c0:3a:
ab:0f:c6:8f:ae:a0:cb:00:d9:f5:cf:65:84:97:50:
d8:b2:15:12:df:a2:df:35:17:b5:c0:4c:3a:f3:56:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:57:AB:48:93:57:02:D0:B7:25:1F:62:F7:14:D4:D5:D9:71:53:76
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e1:58:35:86:f5:35:e2:39:1c:60:d3:dd:52:64:43:37:cd:
a1:fc:25:9e:7e:20:9c:a9:b3:09:ea:08:43:65:fe:7b:42:70:
5a:db:3f:95:3d:fd:97:79:7f:f2:f4:cd:35:f0:07:15:41:60:
a7:dc:2b:30:96:e8:b2:a8:f5:fe:ee:c9:29:af:7a:a0:c3:c2:
79:38:b2:c4:2a:3a:08:54:81:93:ce:ce:9f:a8:2c:81:29:84:
da:c8:ea:34:67:c6:82:fa:e9:6c:36:e5:ba:be:06:1f:e7:b8:
cd:0b:d3:b4:69:5a:32:e2:90:be:32:9e:1a:83:73:30:9b:7e:
12:59:7e:b5:23:58:be:cd:c3:15:f5:dc:b6:61:9e:9e:5b:2b:
13:4a:eb:43:68:53:32:14:fe:c2:14:72:de:cf:f1:be:f3:d0:
3d:28:b8:08:50:f1:c8:2c:59:2f:7a:04:d3:27:68:40:21:cd:
8a:33:1a:7d:42:67:cc:d5:ad:e4:eb:e2:26:cd:f0:6b:1b:a6:
2c:f2:04:5b:8c:2e:ca:4c:05:c4:bb:7d:de:d7:72:b9:0e:18:
21:a0:37:90:4b:f5:7a:f3:35:b1:0a:70:47:aa:73:bd:df:72:
d6:5e:4a:e7:a4:de:a2:b2:9d:db:ea:cc:41:2f:06:c7:1f:50:
bd:d4:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:10:59 2026 by rpki-client